Privacy Policy
Last Updated: March 15, 2024
KinFire Pizza ("we," "our," "us," or "Company") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our pizza delivery service, visit our website, or interact with our micro-kitchen locations.
This policy applies to all information collected through our website, mobile applications, phone orders, in-person interactions, and any related services, sales, marketing, or events (collectively, the "Services").
Information We Collect
Personal Information You Provide
We collect personal information that you voluntarily provide to us when you:
- Place Orders: Name, phone number, email address, delivery address, payment information, dietary preferences, and special delivery instructions
- Create Accounts: Username, password, profile information, order history, and saved preferences
- Subscribe to Services: Subscription preferences, billing information, and delivery schedules
- Contact Customer Service: Communication records, feedback, complaints, and support requests
- Participate in Promotions: Contest entries, survey responses, and marketing preferences
- Apply for Employment: Resume, contact information, work history, and references
- Business Partnerships: Company information, contact details, and commercial agreements
- Catering Services: Event details, guest counts, dietary restrictions, and billing information
- Feedback and Reviews: Comments, ratings, photos, and testimonials about our products and services
Information Automatically Collected
When you access our Services, we may automatically collect certain information about your device and usage patterns:
- Device Information: IP address, browser type and version, operating system, device identifiers, and mobile network information
- Usage Data: Pages visited, time spent on pages, click patterns, search queries, and navigation paths
- Location Data: Approximate geographic location based on IP address and precise location (with your consent) for delivery optimization
- Technical Data: Log files, error reports, performance metrics, and security incident records
- Communication Data: Email open rates, click-through rates, and response patterns to our marketing communications
- Transaction Data: Order timestamps, payment methods used, delivery completion times, and purchase patterns
- Cookie Data: Information collected through cookies, web beacons, and similar tracking technologies
- Third-Party Data: Information from social media platforms, payment processors, and delivery partners (where applicable)
How We Use Your Information
We use the collected information for various legitimate business purposes, including:
- Order Processing and Fulfillment: Processing payments, preparing orders, coordinating delivery, and providing customer support
- Service Improvement: Analyzing usage patterns, optimizing delivery routes, improving website functionality, and developing new features
- Communication: Sending order confirmations, delivery updates, promotional offers, and important service announcements
- Personalization: Customizing your experience, recommending products, and remembering your preferences
- Marketing and Advertising: Sending promotional communications, conducting market research, and measuring advertising effectiveness
- Legal Compliance: Meeting regulatory requirements, responding to legal requests, and protecting our rights and interests
- Security and Fraud Prevention: Monitoring for suspicious activity, preventing unauthorized access, and protecting customer data
- Business Operations: Managing inventory, forecasting demand, training staff, and optimizing kitchen operations
- Quality Assurance: Monitoring service quality, collecting feedback, and implementing improvements
- Financial Management: Processing refunds, managing subscriptions, and maintaining accurate financial records
Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties for their marketing purposes. We may share your information only in the following circumstances:
- Service Providers: Third-party companies that help us operate our business, including payment processors, delivery partners, cloud hosting providers, and customer service platforms
- Business Transfers: In connection with mergers, acquisitions, asset sales, or other business transactions
- Legal Requirements: When required by law, court order, or government regulation, or to protect our rights, property, or safety
- Consent: When you have given explicit consent for specific sharing purposes
- Emergency Situations: To protect the vital interests of individuals or public safety
- Fraud Prevention: With law enforcement or security services to investigate suspected fraudulent activity
- Business Partners: With carefully selected partners for joint marketing initiatives (only with your explicit consent)
- Professional Advisors: With lawyers, accountants, and other professional advisors bound by confidentiality obligations
Data Security and Protection
We implement comprehensive technical, administrative, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security framework includes:
- Encryption: All sensitive data is encrypted both in transit and at rest using industry-standard encryption protocols
- Access Controls: Strict employee access controls with role-based permissions and regular access reviews
- Network Security: Firewalls, intrusion detection systems, and regular security monitoring
- Data Minimization: We collect only the information necessary for our stated purposes
- Regular Audits: Periodic security assessments and vulnerability testing by independent third parties
- Employee Training: Comprehensive privacy and security training for all staff members
- Incident Response: Established procedures for detecting, responding to, and reporting security incidents
- Vendor Management: Due diligence and ongoing monitoring of third-party service providers
- Data Backup: Regular, secure backups with tested recovery procedures
Your Privacy Rights and Choices
Depending on your location and applicable laws, you may have the following rights regarding your personal information:
- Access: Request access to the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete personal information
- Deletion: Request deletion of your personal information (subject to legal and business requirements)
- Portability: Request a copy of your personal information in a structured, machine-readable format
- Restriction: Request restriction of processing under certain circumstances
- Objection: Object to processing of your personal information for certain purposes
- Withdrawal of Consent: Withdraw consent for processing where consent is the legal basis
- Marketing Opt-out: Unsubscribe from marketing communications at any time
- Cookie Management: Control cookie preferences through your browser settings or our cookie preference center
- Account Deletion: Request complete deletion of your account and associated data
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our retention periods are based on:
- The nature and sensitivity of the information
- The purposes for which we process the information
- Legal, regulatory, and contractual requirements
- Legitimate business interests and operational needs
When we no longer need your personal information, we securely delete or anonymize it in accordance with our data retention and disposal policies.
International Data Transfers
Your personal information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers are conducted in accordance with applicable data protection laws and implement appropriate safeguards to protect your information.
Children's Privacy
Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date.
Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Email: privacy@kinfirepizza.com
Phone: +1 416 839 5274
Mail: KinFire Pizza Privacy Officer
76 Dorge Drive
Winnipeg, MB R3V 1M4
Canada
We will respond to your inquiries within 30 days of receipt.